Stats
Actions
Tags
From apk-to-openapi
Use when you have an Android APK, APKM, or XAPK file and need to extract its REST API endpoints into an OpenAPI specification. Also use when reverse-engineering an Android app's network layer, whether native (Retrofit, Volley, OkHttp, Ktor) or React Native (Hermes bytecode).
How this skill is triggered — by the user, by Claude, or both
Slash command
/apk-to-openapi:apk-to-openapiThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Decompile an Android application and extract all HTTP API endpoints into an OpenAPI 3.1.0 spec.
Decompile an Android application and extract all HTTP API endpoints into an OpenAPI 3.1.0 spec.
Use the /extract-api command:
/extract-api path/to/app.apk
If /extract-api is not available, run the one-shot preparation script:
bash ${CLAUDE_PLUGIN_ROOT}/skills/apk-to-openapi/scripts/prepare.sh <file>
This handles dependency checking, APK extraction, jadx decompilation, Hermes detection/decompilation, and native code scanning in a single command. It outputs a structured report listing:
Read the identified files to understand the API surface, then generate openapi.yaml.
For React Native apps with decompiled JS, also run:
bash ${CLAUDE_PLUGIN_ROOT}/skills/apk-to-openapi/scripts/find-js-api-calls.sh <js-file>
| Script | Purpose |
|---|---|
scripts/check-deps.sh | Verify all dependencies are installed |
scripts/install-dep.sh <name> | Install a missing dependency (java, jadx, hermes-dec) |
scripts/extract-apk.sh <file> | Extract base APK from APKM/XAPK bundles |
scripts/detect-hermes.sh <dir> | Detect Hermes bytecode in decompiled output |
scripts/find-js-api-calls.sh <js> | Search decompiled JS for API patterns |
All scripts are at ${CLAUDE_PLUGIN_ROOT}/skills/apk-to-openapi/scripts/.
npx claudepluginhub bryanmig/apk-to-openapi-skill --plugin apk-to-openapiDecompiles Android APK, XAPK, JAR, and AAR files using jadx or Fernflower/Vineflower. Extracts HTTP API endpoints (Retrofit, OkHttp, Volley) and traces call flows from UI to network layer.
Unpacks Android APK files, decodes resources, disassembles DEX to smali, extracts AndroidManifest.xml, and repackages modified APKs for reverse engineering and security analysis.
Automates Android APK red-team analysis: acquisition from Play Store/APKPure/APKMirror, decompilation with jadx, secret/URL/JWT/Firebase grep, Frida instrumentation, and exported-component enumeration.